Privacy Policy
Effective: 14 September 2026
This Privacy Policy explains how personal data may be processed when you visit Oryndrax websites, create or use an account, play the game or communicate through Oryndrax services. Oryndrax is designed to collect only data that is reasonably necessary for operating, securing and improving the service.
1. Data we may process
Depending on the features you use, this may include:
- account data such as email address, player name, account identifiers and account status;
- authentication and security data such as session identifiers, verification status, login events and IP addresses;
- gameplay data such as progression, location, inventory, buildings, actions, transactions, events and audit records;
- communications you submit through chat, support, reports or other community features;
- technical information such as browser, device, request, error and performance data;
- website analytics such as page views and approximate country-level location derived from technical network information.
2. Why we process data
Personal data may be processed to:
- create, authenticate and maintain player accounts;
- provide and synchronize persistent gameplay;
- prevent abuse, fraud, cheating and unauthorized access;
- moderate community features and investigate reports;
- operate, diagnose, secure and improve the websites, API and game services;
- communicate service, security or account information;
- comply with applicable legal obligations and establish or defend legal claims.
3. Legal bases
Processing may be necessary to perform a contract with you, to comply with legal obligations, or for legitimate interests such as service security, fraud prevention, troubleshooting and maintaining a fair multiplayer environment. Where consent is legally required for a particular processing activity, that processing will be based on consent and you may withdraw it as provided by law.
4. Cookies and local storage
Oryndrax may use cookies or equivalent browser storage that are necessary for authentication, security, preferences and core service functionality. Optional analytics or similar technologies will be handled in accordance with applicable consent requirements before they are introduced or used where consent is required.
5. Sharing of data
Personal data is not sold as a product. Data may be disclosed to service providers that process data on behalf of Oryndrax, to authorities where legally required, or to protect the rights, security and integrity of Oryndrax, its users or others. Providers receive only the access reasonably necessary for their role and are subject to appropriate legal and security obligations where required.
6. International processing
If personal data is processed outside the European Economic Area, appropriate safeguards will be used where required by applicable data-protection law.
7. Retention
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including account operation, security, dispute handling, fraud prevention, backup cycles and statutory obligations. Different categories of data may therefore have different retention periods. Data may be retained longer where necessary to establish, exercise or defend legal claims or where law requires it.
8. Security
Oryndrax uses technical and organizational measures intended to protect data against unauthorized access, alteration, disclosure or loss. No online system can be guaranteed to be completely secure, and users are responsible for keeping their own credentials confidential.
9. Your privacy rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability or objection to certain processing, and to withdraw consent where processing is based on consent. Requests may require reasonable identity verification before account-related information is disclosed or changed.
You may also have the right to lodge a complaint with the competent data-protection authority. For users in the Netherlands, this is the Autoriteit Persoonsgegevens.
10. Children
Oryndrax is not intended to circumvent legal age or parental-consent requirements. Where applicable law requires parental authorization for a particular user or processing activity, access or processing may be restricted until the required authorization is available.
11. Changes to this policy
This policy may be updated as Oryndrax develops or legal requirements change. The effective date above will be updated when a revised version is published, and additional notice will be provided for material changes where required by law.
12. Contact
Privacy questions and data-rights requests can be submitted through the official contact information on the Contact page.